ledger-web-livee[.]pages[.]dev

The domain ledger-web-livee.pages.dev is currently active and has been identified as a high-risk brand impersonation threat targeting Ledger. This domain was created on March 25, 2026, and is registered through Cloudflare, Inc. The page title associated with the domain is 'Update Ledger Live for Ledger Nano X', suggesting an intent to deceive users into thinking they are interacting with legitimate Ledger services. The domain resolves to the IP address 188.114.96.3, which is associated with Cloudflare's infrastructure, commonly used by various phishing schemes to obfuscate the true origin of the content.

Analysis using VirusTotal indicates that 11 out of 95 security vendors have flagged this domain, which points to a notable level of suspicion among security professionals. The domain is also blocked by PhishDestroy and appears on one security blocklist, further corroborating its malicious intent. The Gridinsoft trust score for this domain is critically low at 0 out of 100, indicating a complete lack of trustworthiness. Additionally, the presence of security technologies such as HSTS, Cloudflare, and HTTP/3 does not mitigate the inherent risk posed by the domain, as these technologies can also be leveraged by threat actors to enhance the perceived legitimacy of malicious sites.

Defenders should be vigilant in monitoring for any user reports or incident response cases involving this domain. Users should be educated on the risks of interacting with websites that impersonate legitimate brands, especially when they prompt for sensitive information. Given the active status and the high-risk classification, it is advisable to implement blocking measures for this domain across organizational networks to prevent potential compromise.